Serosoft Solutions Academia SIS EagleR Incorrect Access Control Vulnerability Allowing User Account Modification

A vulnerability exists in Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR version 1.0.118, due to incorrect access control in the staff resource endpoint for finding users across the organization. This flaw allows unauthorized creation and modification of user accounts, including those of administrators.

Impact

Exploitation of this vulnerability could lead to unauthorized changes in user account details, potentially allowing for elevated privileges if an administrator account is modified.